Boson Notes Flashcards
Differences between “switchport port-security restrict/protect/shutdown”
restrict: Interface will remain up if more than the max # of addresses are learned, but traffic from the violating devices is dropped and log entry is generated
protect: same as restrict but no log is generated
shutdown: shuts down the port if more than max allowed MAC addresses are learned on the interface
DIfference between alternate and backup port
Alternate: Will become root if root fails
Backup port: When connected to a hub
What’s the default priority for STP?
32786 [0-65535]
RSTP port types
P2P: switch to switch
Shared: connected to a hub (half-duplex)
Edge: connected to hosts
spanning-tree root primary, what is default priority in this case?
Default priority 24576, unless there is a switch with lower priority, then deduct increment of 4096
Four modes of VTP
Client, server, transparent, off
Requirements for VTP
Domain Name must match, they must have a trunk
ACL Standard and Extended numbers
Standard:
1-99
1300-1999
Extended:
100-199
2000-2699
IPV4 AND IPV6. Relate them to numbered and named ACLs
IPv6 only named ACLs
IPv4 only numbered and named ACLs
What is DTP?
DTP: dynamic desirable and dynamic auto to actively make trunks
Steps for finding routing order
- ) Router looks at prefix length (most specific)
- ) Lowest AD
- ) Metric
What algorithm does OSPF have?
Djakstra
How does OSPF and EIGRP differ in terms of knowing topology?
EIGRP relies on neighbors, OSPF has complete network vision
Reference bandwidth for EIGRP and OSPF
10 Mbps for EIGRP and 100Mbps for OSPF
PPP and HDLC differences
HDLC is Cisco proprietary
What is the difference between LCP and NCP? (For PPP)
LCP: Takes care of setting up a link
NCP: Makes sure we can send IP and other protocols across our PPP links
What algorithms are used for encryptions?
AES, DES, DES56
What divides an AS into areas?
OSPF
What is path isolation and what technologies can be used to accomplish it?
Ensures authenticated users can access the virtual network resources appropriate to their credentials or locations.
GRE tunnel and MPLS VPNs
What is access control and what standard is used for it?
Prevents unauthorized users from accessing the virtual network at all
What does
RouterA(config-router)#
-and-
RouterA(config-rtr)#
represent?
OSPFv2
-and-
OSPFv3
How long does a DHCP server lease IP addresses to Host by default?
1 day
Before a user is authenticated, what type of traffic is allowed through the switch port?
EAPOL (Extensible Authentication Protocol over LANs), STP, and CDP (Cisco Discovery Protocol)
What command globally enables 802.1x on a switch?
dot1x system-auth-control
What does each of the command ‘dot1x port-control [force-authorized/force-unauthorized/auto]’
auto: enables authentication on the port, connection is between switch and host; however, if a host is configured with 802.1x authentication, the host will be authenticated
force-authorized: configures the port to authorize any host that connects to the port, no 802.1x authentication process will take place
force-unauthorized: configures a port to never allow authentication for a connected host
How do you configure the OSPF Hello and Dead timers/
ip ospf hello-interval
ip ospf dead-interval
What does …!! mean?
An ARP Resolution error
What does U.U.U mean?
ICMP Destination Unreachable error
What is FIB table?
Contain all prefixes from the IP routing table & structured in a way that is optimized for forwarding
What is an adjacency table?
Maintains Layer 2 addressing info for the FIB
What is an ARP table?
Contains Layer 3 to Layer 2 address translations
What is a CAM table?
Used to find the relationship between Layer 2 address and physical port to reach a device
What are serial interfaces most often used for?
To connect routes over point-to-point leased lines. Connects a service provider to another serial device at a remote location
What does “!A” mean in traceroute command?
It means there is an ACL applied
Where should “ip nat outside” and “ip nat inside” be issued?
“ip nat outside” should be issued on interface that is on the public side of the network
“ip nat inside” should be on the private side of the network